A Microsoft-recommended collection of preconfigured Windows settings from its security teams, rolled out by Intune as a profile; moving to a newer version swaps out the old one rather than combining with it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Security baseline in context, with comparison tables and the common traps.
Terms in this definition
- Intune
Microsoft's device management service, once branded Microsoft Endpoint Manager. Its compliance policies are what the compliant-device grant in Conditional Access relies on.
Related terms
- Azure security baseline (Machine Configuration)
Built-in Machine Configuration baselines for Azure and Arc-enabled machines: the Azure Security Baseline for Windows or Linux and the CIS Linux Benchmarks. Since built-in definitions are read-only, you tailor them with the Modify settings wizard under Policy > Machine Configuration.
- Drift control
A Windows Server 2025 OSConfig capability that, on a regular cycle, resets security baseline settings that have changed from what was applied.
- VCF Benchmarks
Compliance checks in VCF Operations for NSX, vSAN, vCenter, SDDC Manager and ESX, drawn from three sources: the VCF security baseline (the VCF Audit Guides), the CSA Compliance Pack and the CIS Compliance Pack for VCF.